At Vanta, our mission is to help businesses earn and prove trust.We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

We are seeking an experienced Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team.

Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity.

What you’ll do as a Manager, Security Operations at Vanta:

• Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based.
• Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats.
• Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program.
• Lead and drive incident response from detection, remediation, to prevention
• Identify, develop, and implement new processes in our security operations program
• Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks

How to be successful in this role:

• Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust.
• Strong security operations experience, with emphasis on implementing security controls in a SaaS and cloud environment.
• Experience in crafting detections and observability strategies for security events.
• Familiarity with relevant industry regulations and standards (e.g., GDPR, ISO 27001, NIST 800-53) and experience ensuring compliance.
• Experience with leveraging AI to improve security processes.
• Experience with incident response, including acting as incident commander for security incidents.
• Ability to assess and analyze security risks comprehensively, considering both business impact and technical impact; Ability to prioritize risk remediation with consideration to business goals and objectives.